Posted on 2004-11-26
Last Modified: 2010-04-12
faxhard.exe had "consumed" the processor and memory on a PC that I did troubleshooting for, today.  Found it running in Windows Task Manager, would stop the process and within seconds, it was running again.  Finally deleted it again and went to the registry, finding several faxhard entries there, too.  Deleted the registry lines and the PC runs like a top again.  Is this a new virus or spyware on steroids?
Question by:rlr685
    LVL 65

    Assisted Solution

    Hello rlr685 =)

    I think its related to malwares.... coz its an unknown file, could find only this hit on google >>

    and 95% of the times, unknown files are just malwares\spywares\adwares related... and doesn't belong to some Hi-Fi virus.... coz we can find all the details about known viruses and malwares... but there are many out there which puts randon files on the system..... this faxhard.exe can be among them also! :)
    LVL 49

    Accepted Solution

    As you can see that file is under java/packages folder , it is kind of very specific to say if it was infact a bad one or not.
    Did you install any package recently and after which this file started to appear ?

    Did that process take lot of processor even when you ran nothing ie no application ?

    May be that file was in your startup folder or startup location in registry which would have made it run once you booted your windows and even without running any application.

    Make sure checking these registry entries

    if that file is present anywhere else..  
    Also boot to safe mode and do a thorough search for virus , spywares and also search for that file.  That would confirm that the file is not present anywhere else.


    Author Comment

    I walked in on this situation as part of evaluating the proper construction of a proper network.  (Routing is my expertise.)  Processor and memory were almost consumed whether communicating with the WAN, or not.  And, whether applications were open, or not.  After executing virus scans and several spyware removal programs, I ended by deleting all registry entries with faxhard.  PC is still working like a charm today.  Guess my gamble paid off-we were about to reformat anyway.
    LVL 65

    Expert Comment

    >> Guess my gamble paid off-we were about to reformat anyway.
    You are a Lucky Man....!! ;-)
    LVL 49

    Expert Comment

    Glad you got it fixed without having to do those extreme steps


    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Join & Write a Comment

    Article by: btan
    The intent is not to repeat what many has know about Ransomware but more to join its dots of what is it, who are the victims, why it exists, when and how we respond on infection. Lastly, sum up in a glance to share such information with more to help…
    Transferring data across the virtual world became simpler but protecting it is becoming a real security challenge.  How to approach cyber security  in today's business world!
    Hi everyone! This is Experts Exchange customer support.  This quick video will show you how to change your primary email address.  If you have any questions, then please Write a Comment below!
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…

    755 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now